Kodansha: unauthorized access to a company email account

On 27 July, a Kodansha employee clicked a link in a phishing email posing as a business partner and entered credentials on a fake login page, and the company email account was taken over. On 30 July the attacker stole up to 3,812 contacts and sent phishing emails posing as the employee to 553 of them. The employee noticed the same day, changed the password and ended the sessions. Email addresses and some names leaked.